Capital One will pay $210 million in refunds and regulatory fines. Most of the money will go directly to customers.

The bank's phone-sales operators told customers that services like payment protection and credit monitoring were free or mandatory or offered more benefits than they did, federal officials said. The hard selling targeted people with poor credit, they said.

The order against Capital One is the first enforcement action by the Consumer Financial Protection Bureau, set up a year ago to protect consumers from excessive or hidden fees and other financial threats.

Capital One will pay up to $150 million to 2.5 million customers, $25 million to the CFPB and $35 million to the Office of the Comptroller of the Currency, a separate federal agency that oversees its banking operations.

"Consumers deserve to be treated fairly by their credit card issuer," CFPB director Richard Cordray told reporters. He said the problems are not isolated at Capital One and said he expects announcements about other companies.

CFPB officials observed heavy-handed sales tactics by workers at Capital One call centers as they monitored the bank's operations, the agency said in its order.

Agency officials reviewed records and phone scripts, interviewed managers and listened to taped calls with customers, the agency said. The CFPB can oversee the biggest banks and certain other companies by stationing employees at their offices.

Customers were transferred to the call centers when they phoned to activate their credit cards, the order said. For most customers, that meant a two-minute process without any ads for extra products. But people with subprime cards or lower credit limits endured eight-minute pitches by live operators while they were waiting for the card to be activated.

Call center operators often ignored scripts and instructions provided by Capital One, the CFPB's order said. Capital One is being held responsible because of "ineffective oversight," it said.

Comptroller of the Currency Thomas Curry, who heads the OCC, said banks' management of outside vendors is "an area we have identified as an increasingly significant risk," especially for big banks.

Call center operators told customers that buying a product would improve their credit scores or credit limits, the CFPB said. Operators misled callers about the products' costs and sold them to people who were not eligible for their benefits, the agency said.

For example, operators sold "payment protection" that would cancel some credit card debt if the customer became sick or unemployed. But the buyers sometimes were already sick or jobless, so they could never collect on a claim.

The settlement also cites credit monitoring products with names like Credit Inform and ID Alert that are supposed to monitor people's credit records and sometimes reimburse them for lost wages or other expenses related to identity theft.

Banks are pushing the extra services as they scramble to replace profits lost because of recent limits on fees they can charge and how cards can be marketed. Industry officials argue that the limits are encouraging banks to come up with increasingly obscure, difficult-to-detect ways of charging customers.

CFPB enforcement chief Kent Markus said the agency wants to "make it more costly to violate the law than to comply with it."

"We want to discourage the harmful practices from occurring to begin with," he said.

People with lower credit scores and lower credit limits typically have less cash available as a cushion before they start incurring fees on cards, loans and other bills. They are more likely to buy financial products in error because of misunderstandings, independent research shows.

The regulators' charges hinge on the consumer bureau's allegation that Capital One's phone sales workers were "deceptive" in selling the add-on services. The CFPB can charge companies engaged in "unfair, deceptive or abusive practices."

Banks and consumer groups have been locked in a public battle about how the young agency would use that power. Wednesday's action provided the first clear clues about its plans. The CFPB held Capital One responsible for the behavior of a third-party vendor, a rare but not unheard-of decision by federal regulators.

The CFPB's action was also notable for requiring automatic refunds to consumers who allegedly were duped — a simple process compared with the time and paperwork involved in most class-action settlements.

Regulators did allow Capital One to settle the matter without admitting or denying any of the facts that they alleged. Bank critics have complained about the use of similar language by the Securities and Exchange Commission to settle high-profile charges. They say the process lets banks buy their way out of problems and avoid deeper scrutiny.

In addition to the refunds, Capital One agreed to stop selling the products until it can provide a plan that is acceptable to regulators. The response will be monitored by an independent auditor.

Most of the refunds will go to customers who bought add-on card services between August 2010 and January 2012. They will receive the full amount of fees they paid and any other related costs. Capital One customers will receive credit to their accounts; former customers will receive checks.

The CFPB's action solidifies the standing of an agency whose very existence remains a subject of stiff debate on Capitol Hill.

Republicans wanted it to be run by a bipartisan commission instead of an independent director and wanted Congress to have power over the agency's budget. The agency's champions said it needed independence to avoid outside influence.

Republicans delayed some of the agency's powers by holding up the appointment of Cordray, a former Ohio state attorney general. President Barack Obama installed Cordray in January, using his presidential authority to make appointments while the Senate is not in session. Republicans say that appointment was not valid.

Banks and their Republican allies have said the agency's broad powers will prevent banks from issuing new products and will increase costs for customers. Cordray told reporters the agency is sticking to issues that clearly violate the law and hurt consumers.

"We are not going to be bringing enforcement actions on small or technical matters where they're in the gray area," he said.

Capital One blamed the third-party vendor for violating its instructions. Still, Capital One card division president Ryan Schneider apologized to customers in a statement, adding, "We are accountable for actions that vendors take on our behalf."

The consumer bureau, created under the Obama administration's 2010 financial overhaul law, is the first federal regulator focused on protecting consumers rather than on ensuring that banks are stable and profitable.

Among the other card companies that might be in the CFPB's sights, Discover Financial Services said last month that it had been subpoenaed by the CFPB and another federal regulator over its fee-based products, including payment protection.

Discover said it had changed the practices and believes it now complies with regulators' demands.

Capitol One's $25 million penalty will go to the CFPB's civil penalty fund, which is used to refund victims of consumer abuse and pay for financial education programs.

Capital One merged with ING Direct last year over the objections of consumer groups, which said Capital One should not become the fifth-biggest bank because of a poor record with consumers. The National Community Reinvestment Coalition specifically objected to Capital One's use of "payment protection" and asked that it be referred to the CFPB.

When the Federal Reserve allowed the deal, it ordered Capital One to improve internal controls around its lending and debt-collection operations.

Capital One paid more than $200,000 to Britain's top financial regulator in 2007 for misleading marketing of payment protection, according to news reports at the time.